Description (CNA)
A NULL pointer dereference in the safe_atou64 function (src/misc.c) of owntone-server through commit c4d57aa allows attackers to cause a Denial of Service (DoS) via sending a series of crafted HTTP requests to the server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/archersec/poc/tree/master/owntone-server-2
- https://github.com/owntone/owntone-server/commit/41e3733cccd527918a08cf05694c5493341bb70f
- https://github.com/archersec/security-advisories/blob/master/owntone-server/owntone-server-advisory-2026.md
ADP enrichment
No English description supplied.
No references supplied.